repository icon
lm-sys / fastchat Project repository

An open platform for training, serving, and evaluating large language models. Release repo for Vicuna and Chatbot Arena.

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN21 DAYS

FIX

WITHINN/A DAYS

Unauthenticated SSRF in FastChat Controller via /register_worker
jd-admrl-ai
self closed
SSRF via image_url in OpenAI-compatible API — zero SSRF protection in load_image...
anlor1002-alt
duplicate
High
[FastChat] Bug 2: SSRF via Unauthenticated Worker Registration (worker_status Om...
sukhawarring
duplicate
High
[FastChat] Bug 1: Unauthenticated Worker Registration Leads to Model Hijack and...
sukhawarring
duplicate
High
SSRF via Unauthenticated Worker Registration in Controller — Full-Read Internal...
lihfdgjr
duplicate
High
Unauthenticated controller API allows malicious worker registration and prompt i...
nhomyk
duplicate
Critical
SSRF in load_image allows access to internal services via image URL parameter
narrator3333-hash
duplicate
High
Missing Authentication on FastChat Controller — Prompt Theft and Response Manipu...
apeiria-zero
self closed
SSRF via Image URL Fetching — No Validation on User-Supplied URLs
uncle-enzo
duplicate
High
Unauthenticated Worker Registration Allows Model Hijacking and Prompt Exfiltrati...
uncle-enzo
duplicate
Critical
API Key Authentication Bypass via /api/v1/ Endpoints
galanzi2580-wq
duplicate
High
SSRF via Malicious Worker Registration in Controller
galanzi2580-wq
duplicate
High
Missing Authentication on Controller Admin Endpoints Allows Unauthenticated Work...
galanzi2580-wq
duplicate
Critical
SSRF + Auth Bypass via Unauthenticated Worker Registration in FastChat Controlle...
brianmcwilliams
duplicate
None
Unsafe `torch.load()` Without `weights_only=True` Enables Arbitrary Code Executi...
nottiboy137
pending
Authentication Bypass on /api/v1/chat/completions Allows Unauthenticated LLM Inf...
nottiboy137
duplicate
High
Unauthenticated SSRF and User Prompt Exfiltration via Malicious Worker Registrat...
drrose2029
duplicate
Critical
Authentication Bypass on /api/v1/ endpoints allows unauthenticated inference whe...
iiviel
pending
SSRF via load_image() function allows access to internal services
222n5
self closed
Command Injection in Service Launcher - CWE-78
0xhnl
pending
Semaphore Leak in FastChat Multi-Model Worker Enables Remote DoS
logicx24
pending
[FastChat] Insecure pickle deserialization in summarize_cluster.py leads to Remo...
lemonio-007
pending
Malicious model files causing command injection
kyo-w
pending
Open Redirection
akn00b
duplicate
Medium
HTML injection is discovered in lm-sys / fastchat
purpleteamframework
duplicate
Medium
Server-Side Request Forgery (SSRF) on register_worker.py
ralph13
duplicate
Medium
SSRF through serve controller
patrik-ha
duplicate
High
Server Side Request Forgery
oicu0619
High
•$450•CVE-2024-12376
Denial of service
oicu0619
duplicate
High
open redirect
oicu0619
duplicate
None
DoS by Sending Large Filename at File Upload Endpoint
mnqazi
High
•$450•CVE-2024-10912
IP Spoofing and Log Injection via get_ip() Function
zpbrent
informative
Medium
SSRF through register_worker and worker_generate_stream
ethansilvas
self closed
HTML injection in chatbox
ngostuan
not applicable
Server Side Request Forgery
mvlttt
duplicate
High
Server Side Request Forgery using CVE-2024-4325
mnqazi
High
•$450•CVE-2024-11603
SSRF in POST /worker_generate_stream API endpoint in Controller API Server
zpbrent
Critical
•$900•CVE-2024-10044
Open Redirect
mnqazi
Medium
•$75•CVE-2024-10908
DoS Via multipart boundry
mnqazi
High
•$450•CVE-2024-10907